refactor: modernise RPM builder with Python tooling

- Replace Makefile version/release file system with metadata.yaml only
- Add Python build automation (./tools/build) with Gitea API integration
- Add GitHub release updater (./tools/update-gh) for version management
- Centralize Dockerfiles into single parameterized Dockerfile
- Remove 54+ individual package Dockerfiles and version directories
- Update Makefile to use new Python tooling
- Add GITEA_API_TOKEN validation to prevent duplicate builds
- Support both explicit version/release args and metadata.yaml reading

tools/build

@@ -87,7 +87,7 @@ def get_api_tokens() -> Tuple[str, str]:
     # Read GitHub token
     try:
         github_secret = client.secrets.kv.v2.read_secret_version(
-            path='service/github/neoloc/tokens/read-only-token'
+            path='kv/data/service/github/neoloc/tokens/read-only-token'
         )
         github_token = github_secret['data']['data']['token']
         logger.debug("Successfully retrieved GitHub token from Vault")
@@ -98,7 +98,7 @@ def get_api_tokens() -> Tuple[str, str]:
     # Read Gitea token
     try:
         gitea_secret = client.secrets.kv.v2.read_secret_version(
-            path='service/gitea/unkinben/tokens/read-only-packages'
+            path='kv/data/service/gitea/unkinben/tokens/read-only-packages'
         )
         gitea_token = gitea_secret['data']['data']['token']
         logger.debug("Successfully retrieved Gitea token from Vault")

tools/update-gh

@@ -87,7 +87,7 @@ def get_api_tokens() -> Tuple[str, str]:
     # Read GitHub token
     try:
         github_secret = client.secrets.kv.v2.read_secret_version(
-            path='service/github/neoloc/tokens/read-only-token'
+            path='kv/data/service/github/neoloc/tokens/read-only-token'
         )
         github_token = github_secret['data']['data']['token']
         logger.debug("Successfully retrieved GitHub token from Vault")
@@ -98,7 +98,7 @@ def get_api_tokens() -> Tuple[str, str]:
     # Read Gitea token
     try:
         gitea_secret = client.secrets.kv.v2.read_secret_version(
-            path='service/gitea/unkinben/tokens/read-only-packages'
+            path='kv/data/service/gitea/unkinben/tokens/read-only-packages'
         )
         gitea_token = gitea_secret['data']['data']['token']
         logger.debug("Successfully retrieved Gitea token from Vault")